Sentinel Analytics Rules Creation Demo

After connecting your data sources to Microsoft Sentinel, create custom analytics rules to help discover threats and anomalous behaviors in your environment.

Analytics rules search for specific events or sets of events across your environment, alert you when certain event thresholds or conditions are reached, generate incidents for your SOC to triage and investigate, and respond to threats with automated tracking and remediation processes.
Create analytics rules
Define how events and alerts are processed
Define how alerts and incidents are generated
Choose automated threat responses for your rules

https://learn.microsoft.com/en-us/azu...
https://learn.microsoft.com/en-us/azu...